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DETAILED ACTION 



Claim Rejections - 35 USC § 103 



1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-21 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Strickler (U.S. Patent No. 6.122.630 ) in view of Cordery (U.S. Patent No. 5.661 .803) . _ 

3. Referring to the instant claims, Strickler discloses database replication scheme 
(see abstract and Fig.2). Strickler teaches the system having a plurality of nodes 
connected via communication media in a topology. Each node includes a database and 
a transaction transmitter or collector, which sends transactions posted to the database 
to a database at one or more other nodes for replication in the databases of the one or 
more other nodes. All transactions to be posted to databases in remote nodes that were 
sent by a local node are detected (see abstract). Strickler teaches that as applications 
12 make modifications (e.g., inserts, updates and deletes) to the data in the audited 
source database 14, TMF (transaction monitoring facility) or TM/MP (transaction 
monitoring/massively parallel) records the details of the transactions in audit trail files 
18. A shadowbase object or process, known as a "collector" (collector 20) reads the 
audit trails in the audit trail files 18 and collects changes made to the source database 
14 (see Fig.2 and column 2, lines 48-55). 
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4. Referring to the instant claims, the limitation " initiating the audit trail by 
generating ...authentication token and... validation token" is met by Fig.6. 

The "auditor", recited in the instant claims, is met by consumer (38 in Fig. 2). The 
"writer", recited in the instant claims, is met by unit 54 (in Fig.2). Referring to the 
limitation "integrating the ... token in the corresponding record of the audit trail", Strickler 
shows that the token is integrated in the audit trail (see Figs. 10 a and b). The integrated 
token values are represented by TRANIDs. Strickler also teaches "comparing the 
integrated tokens" by the way of comparing TRANIDs of transactions processed by 
consumer B with TRANIDs of such transactions as they appear in the audit trail B (see 
column 26, lines 60-64 and unit 96 in Fig. 11). Strickler, however, does not explicitly 
teach validation tokens based on the encryption key pair. 

5. Referring to the instant claims, Cordery discloses a method of token verification 
(see abstract). Cordery teaches that computer (24 in Fig.) records a local time for an 
audit trail. Cordery also teaches that encryption is performed using a cryptographic 
key. In each digital meter, independent keys are used for generating the digital tokens . 
For security reasons, the keys in different meters are also independent. Information 
about the meter and mail piece are combined and encrypted with vendor and postal 
master keys or keys derived therefrom. Portions of the resulting information are printed 
on the mail piece as digital tokens. The information and tokens can be verified by a 
device that processes the information in the same manner and compares the resulting 
digital tokens with those printed on the mail piece (see column 2, lines 7-20). 

Therefore, at the time the invention was made, it would have been obvious to one of 
ordinary skill in the art to modify the system of Strickler for auditing the changes to a 
database by comparing the validation tokens by having the tokens based on different 
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cryptographic key pairs as taught in Cordery. One of ordinary skill in the art 

would have been motivated to modify the system for auditing the changes to 

a database by comparing the validation tokens by having the tokens based on different 

cryptographic key pairs as taught in Cordery for generating digital tokens (see Cordery, 

column 2, lines 10-12). 

6. Referring to claim 2, Strickler teaches storing the values of the token in the record 
of audit trial (see Fig.6). 

7. Referring to claims 3, 14 and 19, it is well known in the art to concatenate 
encryption keys and use the concatenation result as an a encryption key. For example, 
it is commonly used in the key combining registers. One of ordinary skill in the art would 
have been motivated to concatenate encryption keys and use the concatenation result 
as an encryption key for increasing the strength of the encryption process. 

8. Referring to claims 7, 12 and 17, the limitation "the auditor has the ability to 
compute the values of the validation token in order to detect tampering" is shown in 
Fig. 2 of Strickler. Strickler shows the collector (36) which collects the TRANIDs (i.e. 
tokens) from audit trail and compares them with the ones from restart file (27A) in order 
to detect changes. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Grigory Gurshman whose telephone number is (703) 
306-2900. The examiner can normally be reached on 9 AM-5:30 PM. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (703) 305-1830. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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